Single source of truth for the VITE_API_BASE_URL prefix logic. Both auth/api and lib/api imported the same BASE_URL const; promote joinUrl to a shared exported helper so future endpoints don't drift on the trailing-slash normalization.